tonic-music

How is the user able to recover a lost password using only their secondary 2FA device? This page on your website suggests that you can remove the master password on anyone's fault if they authenticate via their 2FA device.

https://support.logmeininc.com/lastpass/help/recover-your-lo...

You can see why... Actual geniuses are attracted to the hard problems and are usually called massive nut jobs at first.

Want.

No, you should feel smart. This is what the free in free software is all about. Making it work for others and hosting it is your work. Go commercialize it and make your money!

Spanish

I think we all know about view source. The risk lies exactly where you described it. I've never heard of being able to diff a running web page against a set of source repositories. Perhaps another HN reader will go invent that.

Where is this Windows app of which you speak? I don't see it linked on your website.

Just sent this bug report (from the Android client, lol). Will post their response here:

What is the official response to this report?

https://eprint.iacr.org/2018/1121.pdf

I'm not a cryptography expert but I am a web developer and even I can figure out that typing my password into a web app reveals my private key to you if you want to steal it.

The author is right in one respect: the online and self- updating nature of the web app makes it impossible for anyone to verify what code you're really running.

Reading this report also makes me question your response to the recent hack/extortion incident. Now, I'm not really convinced about your response.

There's nothing in my PM account that's secret and I don't really care if you were hacked. I use PM to avoid being tracked for advertising. But I do agree with the author of this paper that you shouldn't make these security claims which aren't true.

Thanks in advance for your response.

-- D

Very interesting, especially in light of the recent claimed hacks to ProtonMail. I've just switched to PM recently and, while I'm no cryptography expert, it did seem unlikely that typing my password into a browser app could ever be considered very secure -- certainly not "invisible" to PM since, as the author points out, you can't see or validate the code running in the browser.

Disgusting. Another reason to delete your Google account.

Too bad smart contracts aren't.

There isn't any real way to contain or process nuclear waste (most of it is literally kept in swimming pools) and this article fries nuclear economics without even taking waste into account. And don't forget decommissioning, another waste process that costs billions and every plant eventually requires (at ratepayers' expense).

Just what the world needs... another way for Google to correlate everything you do online with your personal ID so they can show you more ads.

That's a poor UI for an article. Just say what you want to say! If this article were written in the hypothetical, it would make the point much better.

Indeed. The original description of Lisp included something like 10 primitives. That's it. Numerous examples of full-blown Lisps have been built from just those few primitives. One article I read even showed how arithmetic can be built from car and cdr.

Props for the Inform mention... One of the few cases where writing in pseudo-English is the right answer.

So, COBOL for everyone then? lol. Your "create file" example looks exactly like COBOL. I disagree completely that business-oriented languages (the BO in COBOL stands for "Business Oriented") are the answer.

You decry DSLs because they are "worthless" for the user to learn -- but you forget that they make the work of the original developers that much easier, which is why they exist.

You bring up Lisp as an example and then are upset at its size. If there is one language to rule them all (or at least one that's covered all the bases), it would have to be Lisp. Of course, there's no one perfect language for everything. To paraphrase Ansel Adams, there's no perfect language only the perfect language for the kind of programs you write.

Thanks, Ed. You are right that we need different and better business models that incentivize good behavior on the parts of the big players. The Mimix Company certainly intends to act like good guys. Our business isn't built around holding or selling people's data or locking them to a platform. Having said that, I also believe that better tools are needed and that current software doesn't understand enough context to be useful in the kind of reading and writing we do every day.

Very true. But I do believe it's possible to create a profitable company around ethical, open source software that doesn't create user lock-in and doesn't steal people's data or sell them out. That's exactly the aim of The Mimix Company.

That's two reports of weird scrolling. I'm sorry, guys. I wasn't trying to change scrolling. It's an off the shelf Wordpress template. I'll look into what's causing it and see if I can fix it. Thanks for the heads up...

Now, what do you think of the post content? :-)

Yes, http://bizplan.com.

Yes! Moved three days ago and it's been great. Still have Google account but not using it for mail, cloud, or search. Be sure to setup your DNA records like they show so that your encryption works.